Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: AHdqLflOGwXY3cIT1GhZk0r1tes2xhRKwaJZIeVCzMk=
Subject key identifier: DD:25:4F:15:34:D2:C1:D3:F3:D2:80:04:70:D4:8C:B8:4C:4C:4B:F5
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019FACE3B3247014CBAE5D94BA998C745CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1331
Signing time: Wed 29 Jul 2026 08:00:31 +0000
Manifest this update: Wed 29 Jul 2026 08:00:31 +0000
Manifest next update: Thu 30 Jul 2026 08:00:31 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 0o8Z4mbKsEc7HSC3zpIx6xW6Ef00cxxqBAPwhnSyoTw=)
3: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (hash: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:b3:24:70:14:cb:ae:5d:94:ba:99:8c:74:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jul 29 08:00:31 2026 GMT
Not After : Jul 30 08:00:31 2026 GMT
Subject: CN=dd254f1534d2c1d3f3d2800470d48cb84c4c4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:e8:7b:2c:32:ef:be:16:01:b1:7b:96:4b:
f1:f6:65:fe:e9:92:46:d9:b9:17:b0:2c:b8:cf:f6:
d1:ab:fa:4c:c5:57:86:b9:49:93:86:77:75:ec:dc:
95:c2:a5:cd:87:52:93:9b:01:67:6a:db:32:6a:36:
32:0d:78:54:bc:f1:3e:51:86:66:6d:71:ec:70:da:
b8:19:1f:b1:4d:79:56:dd:89:6a:35:d7:5f:f4:bb:
21:6d:4b:fe:39:85:2e:9b:c4:e1:c0:c8:4b:e9:91:
ab:a1:fe:c5:62:36:0f:42:b5:ac:a5:db:15:6f:9b:
ad:ad:d8:15:3e:12:5c:c6:6c:07:29:c8:fa:e7:4f:
8a:b9:5a:5d:56:b0:4d:31:7f:35:06:9b:69:e0:2a:
a5:97:29:87:96:4b:62:57:1b:1e:27:67:91:0e:cf:
1f:07:e1:53:f1:ae:b6:77:b2:5f:f6:4f:b8:a9:14:
78:33:34:c9:78:1e:36:66:dc:a0:2e:b8:2d:7b:75:
1b:27:a4:13:ce:9a:d6:c9:a6:13:bb:fc:80:eb:42:
20:85:4b:6c:9a:f5:b3:61:c7:3b:c3:a1:54:e5:4d:
85:09:be:bc:40:5e:c3:e1:59:33:50:91:86:a4:f6:
c2:94:2e:48:3a:90:49:61:8b:5a:3a:52:ca:d7:f9:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:4F:15:34:D2:C1:D3:F3:D2:80:04:70:D4:8C:B8:4C:4C:4B:F5
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:41:5f:6a:98:73:2e:d2:e2:ac:dc:c3:24:df:54:b1:a0:
5c:83:ac:30:48:c9:c0:5e:07:92:4e:ab:85:6b:99:9e:31:53:
06:c5:c0:3c:61:f0:a4:15:98:3f:47:84:27:c8:84:c8:a0:c6:
e1:72:f0:87:bd:5e:76:46:e2:c8:ea:a9:f7:40:ae:00:e1:72:
11:4e:96:5b:2b:c7:bc:bc:77:eb:c5:27:15:c0:93:34:db:54:
ea:b6:1a:8b:c1:51:24:c7:33:d6:e9:b3:29:63:a7:6e:ad:43:
7d:99:37:08:6b:13:60:cb:61:78:80:2d:09:e2:6b:62:ce:d7:
91:bc:aa:86:1f:49:b4:66:fd:41:b6:ac:5e:a6:5d:2c:bf:92:
67:12:d2:47:91:45:4c:4a:86:5e:bb:78:14:fd:14:85:ec:0d:
e6:d0:73:d6:ee:65:2b:57:c2:9a:95:c3:85:0a:20:54:d0:61:
10:22:aa:3c:f7:6a:38:01:eb:83:20:54:e1:f6:92:9f:97:a9:
5f:89:59:fe:7c:6a:41:d0:1c:b2:7c:21:5f:9c:66:1b:45:9e:
50:de:e3:e2:8e:ee:de:f0:78:bb:d0:27:b7:dc:f3:6e:d4:12:
97:ee:9d:39:b2:37:20:95:e5:b6:cb:7d:ab:26:0b:c6:61:e2:
22:8d:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:44 2026 by rpki-client